correlation search

[ALLIACOM]

hello every body ,

How to search to correlate there use case please :

Detection of access to basic hash files passwords,
connections from multiple IPs to the same accounts,
Unauthorized device on the network,
Logs deleted from source
Please ?

I want a request in the general framework and I will try to adapt my data.

Thank in advance.

[mstjohn_splunk]

Thanks for posting. Could you give us some more context for your query? You have a much better chance of getting your question answered if you provide more information about your issue. Plus, it will help guide future community users who are facing a similar problem.